CISCO IP Communicator registration rejected: security error

Hi,

I'm working on a cluster of CUCM7.1 and using CISCO IP Communicator 7.0.1

Recently a CUCM sub was and still down, since then all the CISCO IP Comunicators can't register showing the error message: "Registration Rejected: security Error", I've checked the CMG in the device pool config, I found out that this down server isn't on the list.

The action that I have tried so far:

- Resetting the CIPC

- Reinstall the CIPC

- On the PC, going to start -> Run -> certmgr.msc-> Personal -> Certificates, but I didn't find any certificate

- Deleting the CIPC then add it again

Knowing that:

-Physical Ip phones on site register correctly

- I could ping the TFTP servers on the user's PC

- I get in the status messages: "TFTP timeout SEP..." message on the user's PC

- When I connected to the client's LAN using VPN tunnel I managed to register the same CIPC correctly

Check the Directory numbers

Check the Directory numbers that are still in the database. Once you delete the DN that was associated with the phone, then reset the phone, it should Auto Register once again. You can find the DNs listed that are configured in the system under Call Routing > Directory Numbers.

Amine,

Amine,

Can you share some more information.

How many servers are there in the cluster?

To which of the CIPC should register?

Since there were some issues with the cluster, then it might be related with replication between the servers? To confirm can try to configure CMG in the way CIPC should try to register to Publisher instead Subscriber servers?

For the CIPC that fails to register, can you collect the output of the following SQL on Pub and on Sub that it tries to register to?

Can you try to use Wireshark

Can you try to use Wireshark on customer PC to collect pcap from when the phone tries to register? This should tell from which server Phone is downloading config an to which it's trying to register.

It might be useful to see what's the configuration file on the TFTP for this phone. You can download XML file directly from TFTP bu using any TFTP client or Windows command

> tftp <IP_of_TFTP> GET SEP<MAC>.cnf.xml

I've seen those errors as you see when phone tries to register to CCM server that is not a part of call-manager group for this phone. Thsi would usually happen when the phone has incorrect configuration file (like old configuration file or it cannot get it).

Cisco Webex Calling is a cloud service that offers enterprise-grade calling features delivered from the Cisco Webex cloud. This platform is part of the complete Webex collaboration suite that serves the calling, messaging, meeting, team collaboration and...
view more

Cisco SX20 camera moving left right and shaking continuously. We have factory reset the devices still it is a same problem. Even change the camera of working devices with issue devices still the problem.Now the software version of the device is&nbsp...
view more

Hello Experts. We would like to write macro to create a button to switch sources during a call. The only possible view today is content on upside and participants down. This is not the best experience for user's perspective. Someone, could ...
view more

Joining Webex Meetings just got significantly faster – with fewer clicks and less time that’s needed to get into your meetings on desktop and mobile apps.
With our email template simplification, you can enjoy a sin...
view more